ZyXEL Communications XMG1930-30

To Next Page

To Previous Page

Chapter 68 Policy Rule

XMG1930 Series User’s Guide

482

Figure 345 SECURITY > ACL > Policy Rule > Add/Edit (Without Access L3 License)

Main Page

default chapter3
- Document Conventions3
- Contents Overview4
- Table of Contents4
- Table of Contents7
- Part I: User's Guide27
- User's Guide27
- Getting to Know Your Switch28
- Introduction28
- License Option28
- Multi-Gigabit31
- Management Modes32
- Mode Changing33
- Web Configurator Networked AV Mode35
- ZON Utility35
- Poe36
- Backbone Example Application37
- Example Applications37
- Poe Example Application37
- Bridging or Fiber Optic Uplink Example Application38
- High Performance Switching Example39
- IEEE 802.1Q VLAN Application Examples39
- Good Habits for Managing the Switch40
- Ways to Manage the Switch40
- Freestanding Installation Procedure41
- Hardware Installation and Connection41
- Installation Scenarios41
- Safety Precautions41
- Installation Requirements42
- Mounting the Switch on a Rack42
- Precautions42
- Attaching the Mounting Brackets to the Switch43
- Mounting the Switch on a Rack43
Chapter 3 Hardware Panels45
- Front Panel Connections45
- Hardware Panels45
- Multi-Gigabit Ethernet Ports46
- Poe (XMG1930-30HP)47
- SFP/SFP+ Slots47
- Rear Panel49
- USB Port49
- Grounding50
- AC Power Connection51
- Leds54
- Part II: Technical Reference57
- Technical Reference57
Chapter 4 Web Configurator58
- Overview58
- System Login58
- Web Configurator58
- Requirements63
- Run the ZON Utility63
- Zyxel One Network (ZON) Utility63
- Basic Settings67
- Networked AV Mode Wizard67
- Advanced Settings72
- Wizard77
- Basic78
- Protection83
- Vlan85
- Qos86
- Web Configurator Layout87
- Tables and Lists96
- Change Your Password97
- Save Your Configuration98
- Switch Lockout98
- Help99
- Log out of the Web Configurator99
- Reboot the Switch99
- Reset the Switch99
- Restore Button99
- Restore Custom Default99
- Create a VLAN101
- Initial Setup Example101
- Overview101
- Set Port VID102
- Configure Switch Management IP Address103
Chapter 6 Tutorials106
- How to Use Dhcpv4 Snooping on the Switch106
- Overview106
- Tutorials106
- Create a VLAN110
- DHCP Relay Tutorial Introduction110
- How to Use Dhcpv4 Relay on the Switch110
- Configure Dhcpv4 Relay113
- How to Use Auto Configuration through a DHCP Server on the Switch114
- Troubleshooting114
Chapter 7 DASHBOARD118
- Dashboard118
- New User Interface118
- Port Status121
- Quick Links to Use122
Chapter 8 MONITOR124
- Monitor124
- ARP Table125
- ARP Table Overview125
Chapter 9 ARP Table125
- Viewing the ARP Table125
- What You Can Do125
- What You Need to Know125
Chapter 10 IP Table127
- IP Table127
- IP Table Overview127
- Viewing the IP Table128
Chapter 11 Ipv6 Neighbor Table129
- Ipv6 Neighbor Table129
- Ipv6 Neighbor Table Overview129
- Viewing the Ipv6 Neighbor Table129
Chapter 12 MAC Table131
- MAC Table131
- MAC Table Overview131
- What You Can Do131
- What You Need to Know131
- Viewing the MAC Table132
Chapter 13 Neighbor134
- Neighbor134
- Neighbor Overview134
- What You Can Do134
- Neighbor Details135
Chapter 14 Path MTU Table138
- Path MTU Overview138
- Path MTU Table138
- Viewing the Path MTU Table138
Chapter 15 Port Status139
- Port Status139
- What You Can Do139
- Port Details140
- DDMI143
- DDMI Details143
- Port Utilization145
Chapter 16 Routing Table147
- Ipv4 Routing Table147
- Routing Table147
- Routing Table Overview147
- What You Can Do147
- Ipv6 Routing Table148
Chapter 17 System Information149
- System Information149
- What You Can Do149
Chapter 18 System Log152
- System Log152
- System Log Overview152
- System154
Chapter 20 Cloud Management155
- Cloud Management155
- Cloud Management Overview155
- Nebula Center Control Discovery155
Chapter 21 General Setup159
- General Setup159
- Hardware Monitor Setup161
Chapter 22 Interface Setup163
- Interface Setup163
- Interface Setup Overview163
- Add/Edit Interfaces164
Chapter 23 IP Setup165
- IP Interfaces165
- IP Setup165
- IP Setup Overview165
- IP Status165
- What You Can Do165
- IP Status Details166
- IP Setup168
- Add/Edit IP Interfaces169
- Network Proxy Configuration170
Chapter 24 Ipv6172
- Ipv6172
- Ipv6 Overview172
- Ipv6 Status172
- What You Can Do172
- Ipv6 Interface Status Details173
- Ipv6 Global Setup175
- Ipv6 Interface Setup176
- Edit an Ipv6 Interface177
- Ipv6 Link-Local Address Setup177
- Edit an Ipv6 Link-Local Address178
- Add/Edit an Ipv6 Global Address179
- Ipv6 Global Address Setup179
- Ipv6 Neighbor Discovery Setup180
- Edit an Ipv6 Neighbor Discovery181
- Edit Ipv6 Router Discovery182
- Ipv6 Router Discovery Setup182
- Ipv6 Prefix Setup183
- Add/Edit Ipv6 Prefix184
- Ipv6 Neighbor Setup185
- Add/Edit Ipv6 Neighbor186
- Dhcpv6 Client Setup186
- Edit Dhcpv6 Client187
Chapter 25 Logins189
- Logins189
- Set up Login Accounts189
Chapter 26 SNMP191
- Configure SNMP191
- Snmp191
- SNMP Overview191
- What You Can Do191
- Add/Edit SNMP User193
- Configure SNMP User193
- SNMP Trap Group195
- Enable or Disable Sending of SNMP Traps on a Port196
- About SNMP197
- Technical Reference197
Chapter 27 Switch Setup204
- Introduction to Vlans204
- Switch Setup204
- Switch Setup Overview204
Chapter 28 Syslog Setup207
- Syslog Overview207
- Syslog Setup207
- What You Can Do207
- Add/Edit a Syslog Server209
Chapter 29 Time Range210
- Configuring Time Range210
- Time Range210
- Time Range Overview210
- What You Can Do210
- Add/Edit Time Range211
Chapter 30 PORT213
- Port213
- Auto PD Recovery214
- Auto PD Recovery (for Poe Models Only) Overview214
Chapter 31 Auto PD Recovery214
- What You Can Do214
- Activate the Automatic PD Recovery216
Chapter 32 Flex Link219
- Flex Link219
- Flex Link Overview219
- Flex Link Status219
- What You Can Do219
- Flex Link Setup220
- Add/Edit Flex Link221
Chapter 33 Green Ethernet222
- Configuring Green Ethernet222
- Green Ethernet222
- Green Ethernet Overview222
Chapter 34 Link Aggregation224
- Link Aggregation224
- Link Aggregation Overview224
- What You Can Do224
- What You Need to Know224
- Link Aggregation Status225
- Link Aggregation Setting227
- Link Aggregation Control Protocol228
- Static Trunking Example230
- Technical Reference230
- Link Layer Discovery Protocol (LLDP)232
- LLDP Overview232
- LLDP-MED Overview233
- LLDP Local Status234
- What You Can Do - LLDP234
- What You Can Do - LLDP MED234
- LLDP Local Port Status Detail236
- LLDP Remote Status239
- LLDP Remote Port Status Detail240
- LLDP Setup245
- Basic TLV Setting247
- Org-Specific TLV Setting248
- LLDP-MED Setup249
- LLDP-MED Network Policy250
- Add/Edit LLDP-MED Network Policy251
- Add/Edit LLDP-MED Location252
- LLDP-MED Location252
Chapter 36 OAM255
- Oam255
- OAM Overview255
- OAM Status255
- What You Can Do255
- OAM Details256
- OAM Setup260
- OAM Remote Loopback261
Chapter 37 Poe Setup263
- Poe Setup263
- Poe Status (for Poe Models Only)263
- Poe Setup265
- Add/Edit Poe Time Range269
- Poe Time Range Setup269
Chapter 38 Port Setup271
- Port Setup271
- Port Buffer273
- Port Buffer Setting273
- What You Can Do273
Chapter 39 ZULD275
- What You Can Do275
- What You Need to Know275
- Zuld275
- ZULD Overview275
- ZULD Status276
- ZULD Setup277
- Switching279
- Layer 2 Protocol Tunneling280
- Layer 2 Protocol Tunneling Overview280
- What You Can Do280
- What You Need to Know280
- Configuring Layer 2 Protocol Tunneling281
Chapter 42 Loop Guard284
- Loop Guard284
- Loop Guard Overview284
- What You Can Do284
- What You Need to Know284
- Loop Guard Setup286
Chapter 43 MAC Pinning287
- MAC Pinning287
- MAC Pinning Configuration287
- MAC Pinning Overview287
Chapter 44 Mirroring289
- Mirroring289
- Mirroring Overview289
- Port Mirroring Setup289
Chapter 45 Multicast291
- Multicast291
- Multicast Overview291
- What You Can Do - Ipv4 Multicast291
- What You Can Do - Ipv6 Multicast291
- What You Can Do - MVR292
- What You Need to Know292
- Ipv4 Multicast Status295
- IGMP Snooping296
- IGMP Snooping VLAN300
- Add/Edit IGMP Snooping Vlans301
- IGMP Filtering Profile302
- Add IGMP Filtering Profile303
- Add IGMP Filtering Rule303
- Ipv6 Multicast304
- MLD Snooping-Proxy305
- MLD Snooping-Proxy VLAN305
- Add/Edit MLD Snooping-Proxy VLAN306
- MLD Snooping-Proxy Port Role Setting308
- MLD Snooping-Proxy Filtering309
- Add MLD Snooping-Proxy Filtering Profile311
- MLD Snooping-Proxy Filtering Profile311
- Add MLD Snooping-Proxy Filtering Rule312
- MVR Configuration313
- Add/Edit MVR314
- MVR Group Setup315
- Add/Edit MVR Group316
- MVR Configuration Example317
- Static Multicast Forwarding320
- Static Multicast Forwarding Overview320
- What You Can Do320
- What You Need to Know320
- Static Multicast Forwarding by MAC321
- Add/Edit Static Multicast Forwarding by MAC322
- Configure a Static Multicast Ipv4 Address322
- Add/Edit a Static Multicast Address by IP323
Chapter 47 Pppoe325
- Pppoe325
- Pppoe Intermediate Agent Overview325
- What You Can Do325
- What You Need to Know325
- Pppoe Intermediate Agent327
- Pppoe IA Port329
- Pppoe IA Port VLAN330
- Pppoe IA VLAN332
- Differentiated Services333
- Diffserv Overview333
- What You Can Do333
- What You Need to Know333
- Activating Diffserv334
- DSCP-To-IEEE 802.1P Priority Settings335
- Configuring DSCP Settings336
Chapter 49 Queuing Method337
- Queuing Method337
- Queuing Method Overview337
- What You Can Do337
- What You Need to Know337
- Configuring Queuing338
- Assign Priority Queue340
Chapter 50 Priority Queue340
- Priority Queue340
- Priority Queue Overview340
- What You Can Do340
- Bandwidth Control342
- Bandwidth Control Overview342
- Bandwidth Control Setup342
Chapter 51 Bandwidth Control342
- CIR and PIR342
- What You Can Do342
Chapter 52 Sflow344
- Sflow344
- Sflow Overview344
- Sflow Port Configuration344
- Add/Edit Sflow Collector346
- Sflow Collector Configuration346
- Spanning Tree Protocol348
- Spanning Tree Protocol Overview348
- What You Can Do348
- What You Need to Know348
- Spanning Tree Protocol Status351
- Spanning Tree Setup352
- Rapid Spanning Tree Protocol Status354
- Configure Rapid Spanning Tree Protocol357
- Multiple Rapid Spanning Tree Protocol359
- Configure Multiple Rapid Spanning Tree Protocol361
- Multiple Spanning Tree Protocol Status364
- Configure Multiple Spanning Tree Protocol367
- Add/Edit Multiple Spanning Tree369
- Multiple Spanning Tree Protocol Port Setup370
- MSTP Network Example372
- Technical Reference372
- MST Instance373
- MST Region373
- Common and Internal Spanning Tree (CIST)374
Chapter 54 Static MAC Filtering375
- Configure a Static MAC Filtering Rule375
- Static MAC Filtering375
- Static MAC Filtering Overview375
- What You Can Do375
- Add/Edit a Static MAC Filtering Rule376
Chapter 55 Static MAC Forwarding377
- Configure Static MAC Forwarding377
- Static MAC Forwarding377
- Static MAC Forwarding Overview377
- What You Can Do377
- Add/Edit Static MAC Forwarding Rules378
Chapter 56 VLAN380
- Vlan380
- VLAN Overview380
- What You Can Do380
- What You Need to Know380
- Introduction to IEEE 802.1Q Tagged Vlans381
- VLAN Status384
- VLAN Details385
- Add/Edit a Static VLAN386
- Configure a Static VLAN386
- VLAN Port Setup388
- Configure GVRP389
- Subnet Based VLAN390
- Configuring Subnet Based VLAN391
- Add/Edit Subnet Based VLAN392
- Configuring Protocol Based VLAN393
- Protocol Based VLAN393
- Add/Edit a Protocol Based VLAN394
- Voice VLAN396
- Add/Edit a Voice VLAN397
- MAC Based VLAN398
- Add/Edit a MAC Based VLAN399
- Vendor ID Based VLAN399
- Add/Edit a Vendor ID Based VLAN400
- Port-Based VLAN Setup401
- Configure a Port-Based VLAN402
Chapter 57 VLAN Isolation405
- Configuring VLAN Isolation405
- VLAN Isolation405
- VLAN Isolation Overview405
- Add/Edit a VLAN Isolation Rule406
Chapter 58 VLAN Mapping408
- VLAN Mapping408
- VLAN Mapping Example408
- VLAN Mapping Overview408
- What You Can Do408
- Enable VLAN Mapping409
- Add/Edit VLAN Mapping410
- VLAN Mapping Setup410
Chapter 59 VLAN Stacking412
- VLAN Stacking412
- VLAN Stacking Example412
- VLAN Stacking Overview412
- VLAN Stacking Port Roles413
- VLAN Tag Format413
- Configuring VLAN Stacking414
- Frame Format414
- Port-Based Q-In-Q416
- Selective Q-In-Q417
- Add/Edit Selective Q-In-Q418
- Networking419
- ARP Overview420
- ARP Setup420
Chapter 61 ARP Setup420
- What You Can Do420
- What You Need to Know420
- ARP Learning422
- Static ARP423
- Add/Edit Static ARP424
Chapter 62 DHCP426
- Dhcp426
- DHCP Overview426
- What You Can Do426
- What You Need to Know426
- Dhcpv4 Relay427
- Dhcpv4 Relay Status427
- Dhcpv4 Relay Agent Information428
- Add/Edit a Dhcpv4 Option 82 Profile429
- Dhcpv4 Option 82 Profile429
- Configuring Dhcpv4 Smart Relay430
- Add/Edit Dhcpv4 Global Relay Port431
- DHCP Smart Relay Configuration Example432
- Add/Edit Dhcpv4 VLAN Setting434
- Dhcpv4 VLAN Setting434
- Add/Edit Dhcpv4 VLAN Port435
- Example: DHCP Relay for Two Vlans436
- Dhcpv6 Relay437
- Add/Edit Dhcpv6 Relay438
- DHCP Server Guard439
Chapter 63 Static Route441
- Static Route441
- Static Routing Overview441
- What You Can Do441
- Add/Edit Ipv4 Static Route442
- Ipv4 Static Route442
- Ipv6 Static Route443
- Add/Edit Ipv6 Static Route444
- Security445
- Aaa446
- Authentication, Authorization and Accounting (AAA)446
Chapter 65 AAA446
- What You Can Do446
- What You Need to Know446
- RADIUS Server Setup447
- TACACS+ Server Setup449
- AAA Setup451
- Technical Reference455
- Vendor Specific Attribute455
- Attributes Used for Authentication457
- Supported RADIUS Attributes457
- Attributes Used for Accounting458
- Access Control461
- Access Control Overview461
Chapter 66 Access Control461
- Service Access Control461
- What You Can Do461
- Remote Management463
- Account Security464
- SSH Overview466
- Technical Reference466
- Introduction to HTTPS467
- Google Chrome Warning Messages469
Chapter 67 Classifier471
- Classifier471
- Classifier Overview471
- What You Can Do471
- What You Need to Know471
- Classifier Setup472
- Classifier Status472
- Add/Edit a Classifier474
- Classifier Global Setting477
- Classifier Example478
Chapter 68 Policy Rule480
- Diffserv480
- DSCP and Per-Hop Behavior480
- Policy Rule480
- Policy Rules Overview480
- What You Can Do480
- Add/Edit a Policy Rule481
- Policy Rules481
- Policy Example485
- Anti-Arpscan487
- Anti-Arpscan Overview487
Chapter 69 Anti-Arpscan487
- What You Can Do487
- What You Need to Know487
- Anti-Arpscan Host Status488
- Anti-Arpscan Status488
- Anti-Arpscan Setup489
- Add/Edit Anti-Arpscan Trust Hosts491
- Anti-Arpscan Trust Host491
- BPDU Guard493
- BPDU Guard Overview493
- BPDU Guard Status493
Chapter 70 BPDU Guard493
- What You Can Do493
- BPDU Guard Setup494
Chapter 71 Storm Control496
- Storm Control496
- Storm Control Overview496
- Storm Control Setup496
- What You Can Do496
Chapter 72 Error-Disable498
- CPU Protection Overview498
- Error-Disable498
- Error-Disable Overview498
- Error-Disable Recovery Overview498
- What You Can Do498
- Error-Disable Status499
- CPU Protection Setup501
- Error-Disable Detect Setup502
- Error-Disable Recovery Setup503
Chapter 73 IP Source Guard505
- IP Source Guard505
- IP Source Guard Overview505
- What You Can Do506
- Ipv4 Source Guard507
- Ipv4 Source Guard Static Binding507
- Add/Edit Ipv4 Source Guard Static Binding509
Chapter 74 DHCP Snooping510
- DHCP Snooping510
- DHCP Snooping Overview510
- DHCP Snooping Status511
- What You Can Do511
- DHCP Snooping Setup514
- DHCP Snooping Port Setup515
- DHCP Snooping VLAN Setup517
- Add/Edit DHCP Snooping VLAN Ports518
- DHCP Snooping VLAN Port Setup518
- DHCP Snooping Overview519
- Technical Reference519
- ARP Inspection522
- ARP Inspection Status522
Chapter 75 ARP Inspection522
- ARP Inspection Log Status523
- ARP Inspection VLAN Status523
- ARP Inspection Setup524
- ARP Inspection Port Setup526
- ARP Inspection VLAN Setup527
- Ipv6 Source Guard528
- Ipv6 Source Binding Status529
- Add/Edit Ipv6 Static Binding530
- Ipv6 Static Binding530
- Ipv6 Source Guard Policy531
- Add/Edit an Ipv6 Source Guard Policy532
- Ipv6 Source Guard Port Setup533
- Add/Edit a Ipv6 Snooping Policy534
- Ipv6 Snooping Policy Setup534
- Ipv6 Snooping VLAN Setup535
- Add/Edit an Ipv6 Snooping VLAN536
- Ipv6 DHCP Trust Setup536
- ARP Inspection Overview538
- Technical Reference538
Chapter 76 Port Authentication540
- Port Authentication540
- Port Authentication Overview540
- What You Can Do540
- MAC Authentication541
- What You Need to Know541
- Activate IEEE 802.1X Security542
- Activate MAC Authentication543
- Guest VLAN546
- Compound Authentication548
- IEEE 802.1X549
- Technical Reference549
- Radius550
- EAP (Extensible Authentication Protocol) Authentication551
- EAPOL (EAP over LAN)552
- About Port Security553
Chapter 77 Port Security553
- Port Security553
- Port Security Overview553
- Port Security Setup553
- Certificates556
Chapter 78 MAINTENANCE556
- Maintenance556
- Overview556
- What You Can Do556
- HTTPS Certificates557
- Filename Conventions558
- FTP Command Line558
- Technical Reference558
- FTP Command Line Procedure559
- Cluster Management Overview560
- FTP Restrictions560
- GUI-Based FTP Clients560
- Cluster Management Status561
- What You Can Do561
- Clustering Management Setup562
- Cluster Member Switch Management564
- Technical Reference564
- Backup Configuration566
- Restore Configuration566
- Auto Configuration567
- Erase Running-Configuration568
- Save Configuration569
- Configure Clone570
- Diagnostic572
- Firmware Upgrade574
- Reboot System576
- Service Register577
- Tech-Support578
- Tech-Support Download579
Chapter 79 Networked AV Mode581
- Help581
- Overview581
- Summary581
- Monitor583
- System Information583
- What You Can Do583
- System585
- What You Can Do585
- Cloud Management586
- General Setup587
- IP Setup589
- Add/Edit IP Interfaces590
- Logins591
- Configure SNMP593
- Configure SNMP User595
- Add/Edit SNMP User596
- Configure SNMP Trap Group597
- Enable or Disable Sending of SNMP Traps on a Port598
- Port599
- Link Aggregation600
- Link Aggregation Status600
- What You Can Do600
- Link Aggregation Setting602
- Link Aggregation Control Protocol603
- Poe Status605
- Poe Setup607
- Port Setup610
- Port Mirroring612
- Switching612
- Ipv4 Multicast Status614
- Multicast614
- What You Can Do614
- IGMP Snooping615
- IGMP Snooping VLAN618
- Add/Edit IGMP Snooping Vlans619
- IGMP Filtering Profile620
- Add IGMP Filtering Profile621
- Add IGMP Filtering Rule622
- Vlan622
- What You Can Do622
- What You Need to Know622
- VLAN Status625
- VLAN Details626
- Configure a Static VLAN627
- Add/Edit a Static VLAN628
- VLAN Port Setup629
- Access Control630
- Security630
- Service Access Control631
- What You Can Do631
- Remote Management632
- Storm Control633
- Maintenance634
- Backup Configuration635
- Restore Configuration635
- What You Can Do635
- Save Configuration636
- Firmware Upgrade637
- Reboot System637
- Tech-Support638
- Tech-Support Download639
- Part III: Troubleshooting and Appendices640
Chapter 80 Troubleshooting641
- Power, Hardware Connections, and Leds641
- Switch Access and Login642
- Switch Configuration644
Appendix A Customer Support645
Appendix B Common Services650
Appendix C Ipv6653
Appendix D Legal Information662
- Index667

ZyXEL Communications XMG1930-30 - Page 482

Table of Contents

Related product manuals